Proxy Server - Bypass Skype Subnets

Hi,
My company use Finjan (M86) antivirus/malicious code software, which appears to be stopping https connections for various ip addresses. Do Skype have a list of subnets they recommend should be added to proxy servers (Squid), to bypass the Finjan scanners for these subnet ranges. I know Webex and MS Livemeeting do this, but do Skype?
If not, can you help with my problem as I cannot unblock all the ip addresses (too many and I'm guessing they may change regularly). I'm happy to send my email address if discussion is better done privately.
Regards, Ric

i cant log on throw server whever i have access to internet.

Similar Messages

IPlanet Web Proxy Server 3.6 and emptying out the cache.

Hello.
I'm wanting to empty out our proxy server's cache in an attempt to resolve one of our users help desk problems - a web site they are accessing is not loading correctly when going through the proxy server, bypassing the proxy server works.
The problem is that the technician who implemented our iPlanet Web Proxy Server 3.6 has left the company and no one else is aware of how to do this. Can anyone advise of what has to be done to achieve it? Thank you.
Kind regards,
Jimmey.

Hi
This as per the HTTP/1.1 RFC (RFC2616)
The Connection general-header field allows the sender to specify options that are desired for that particular connection and MUST NOT be communicated by proxies over further connections.
The Connection header has the following grammar:
Connection = "Connection" ":" 1#(connection-token)
connection-token = token
HTTP/1.1 proxies MUST parse the Connection header field before a message is forwarded and, for each connection-token in this field, remove any header field(s) from the message with the same name as the connection-token. Connection options are signaled by the presence of a connection-token in the Connection header field, not by any corresponding additional header field(s), since the additional header field may not be sent if there are no parameters associated with that connection option.
Read the following at
http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.1.3
and
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.10
Regards
Nagendra HK

Skype is bypassing the proxy server

Hello.
I've tried following this guide to setup Skype to connect through a proxy. However, whether or not I put in a valid address / login, the client is able to connect regardless. It seems to me that the client is bypassing the proxy settings and simply uses my direct connection regardless (which I'd like to avoid).
Is there a way to fix this at all?
Thank you.

I am having the same issue, I have set my skype connection setting to HTTPS and despite providing the proxy settings the skype automatically shifts to direct connection whenever it is avaible. I want it to use the proxy. Any ideas how to fix it ?

It is possible to bypass proxy server from inside LAN

Hi ,
We have a proxy server which is used to provide internet access to LAN clients . I want some clarification regarding ,whether can anyone bypass our proxy server to access internet .

It depends what kind of deployment you've. If you've explicit forward proxy the disadvantage include a user's ability to alter an individual client configuration and bypass the proxy.
You can also use a Group Policy Option (GPO) setting to prevent users from changing proxy settings in windows enviornment. If you cannot enforce group policy settings on client machines, this type of configuration can be difficult to maintain for a large user base because of the lack of centralized management.
~BR
Jatin Katyal
**Do rate helpful posts**

There is a problem with the security certificate of the proxy server. Error code 18 and 38.

Hi All,
After several hours and a short night of sleep I'm out of ideas and hopefully someone here can help me trying to solve this one. First of all the situation:
Exchange 2013 on a remote location with a CA-certificate.
Outlook 2010 and 2013 on different locations, locally installed and on RDS.
When I open Outlook on my laptop all is fine, no errors, good sync, no problem. But when I open Outlook on our Remote Desktop Servers with Outlook 2013 I'm getting errors like "There is a problem with the security certificate of the proxy server. The
name on the security certificate is invalid or does not match the name of the site. Outlook is unable to connect to this server. (Error code 18)". Opening Outlook 2010 the message is the same, but the error code now is 38.
After this Outlook opens and is working, there's one more error though. After a while an security warning pops up with the message: "Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the
site's security certificate. * The security certificate was issued by a company you have not chosen to trust. View the certificate to determine whether you want to trust the certifying authority. * The security certificate is valid. * The name on the security
certificate is invalid or does not match the name of the site."
Strangest thing is, it is the certificate of my RDS! It isn't my valid en officially bought certificate from my mailserver. What's going on? I'm out of options, what I've tried so far (in random order):
- restarting mailserver and AD;
- restarting switches;
- restarting routers;
- restarting RDS, AD and all other servers;
- bypassed proxyserver for RDS;
- created a new profile;
- checked recently installed updates;
- checked certificate on mailserver;
- checked RDS on a different location, working fine.
Nothing helped, what can I do next? Please advice.
Regards.

Found a thread that solves half my problem (https://social.technet.microsoft.com/Forums/office/en-US/70d18244-889a-4d95-ac3f-e234672a82b2/there-is-a-problem-with-the-proxy-servers-security-certificate-error-when-starting-outlook?forum=exchangesvrclients).
The first message can be suppressed by adding this to the Exchange config:
set-outlookprovider -Identity EXCH -CertprincipalName msstd:webmail.domain.tld
set-outlookprovider -Identity EXPR -CertprincipalName msstd:webmail.domain.tld
Giving the command get-outlookprovider, gives me empty information regarding the certprinipalname. Filled
this and after recreating the profile or deleting the ost-file I still have the second alert with the local certificate of my RDS.
Not completely where I want to be, any help regarding the second alert is greatly appreciated!

How would a corporation deploy Sun ONE Web Proxy Server?

A corporation should deploy Sun ONE Web Proxy Server at the following key places:
* The Internet gateway: Sun ONE Web Proxy Server deployed just behind the firewall facilitates access to the Internet and reduces response times and communications expense.
* Major sub-network connections: Marketing, Sales, Product Development, Human Resources, and Finance departments might have their own subnetworks. An Sun ONE Web Proxy Server deployed at each subnet can reduce traffic on the corporate backbone.
* Remote offices that are disconnected from the internal network: Sun ONE Web Proxy Server can provide a quick mechanism for replicating content when necessary, providing better company integration and increasing network performance without large capital and communications expense.
* Internationally: Outside the United States, communications bandwidth is typically much more expensive, making Sun ONE Web Proxy Servers even more cost effective. Every international office can make use of an Sun ONE Web Proxy Server.
* Outside the firewall as a Web server substitute in reverse proxy configuration: This protects information on the secure Web server behind the firewall and offers load balancing via caching.

http://wwws.sun.com/software/download/products/3ef1fcb5.html
If u wait for a week or so, SP4 will also be there.
Maneesh

Safari 3.x (Leopard) and Web Proxy Server Problems:

I have a Squid proxy server running on Linux. Users web traffic is directed through it via WPAD server which hosts a simple PAC file. The PAC files is very clean and small. It basically points all external (Internet) web traffic to our Proxy server. All of our Windows, Linux and Tiger clients work fine. However, Leopard (Safari 3.x) doesn't work quite right. Here's what happens:
Mac user logs into a Leopard 10.5 Mac. User launches Safari and tries to go to an external (Internet) site. The WPAD server is contacted and the Mac User is prompted to authenticate to the Proxy server. This is totally normal behavior thus far. Then, however, every few minutes the Leopard Mac user will be prompted to authenticate again (sometimes 2 or 3 times in a row!). Firefox 2.0.x, when configured to use the WPAD/PAC server and Proxy server, works fine in Leopard. Only Safari 3 in Leopard is having the problem.
All the Macs (Tiger and Leopard) are configured to use the Proxy server via OS X's Network Pref Pane (using the "Automatic Proxy Configuaration"). Reminder: Tiger works fine (even with the Safari betas), but Leopard's doesnt not.
I have attached our PAC file inline below (some things edited for privacy):
// SIMR automatic configuration for Mozilla and friends
// $Id: wpad.dat,v 1.8 2005/12/14 20:18:23 dct Exp $
// Edit carefully, since many may be relying on this...
function FindProxyForURL(url, host) {
// Bypass the proxy for internal addresses
if (!url.match("http:")
|| url.match("http://127.0.")
|| url.match("http://10.")
|| url.match("http://192.168.")
|| isPlainHostName(host)
return "DIRECT";
// These are exceptions given in the IE config for Windows.
if (host == "www.ncbi.nlm.nih.gov"
|| host == "chabry.caltech.edu"
|| host == "flybase.bio.indiana.edu"
|| host == "www.fedex.com"
|| host == "domain.org"
return "DIRECT";
return "PROXY <proxy server>:8080";
}

I think I have a similar problem. I am a Mac connecting to an otherwise all PC school network.
A new location with all correct proxies has been set up. However, Safari always crashes on first attempt to negotiate its way through our server to the internet. Internet explorer gets through because in its preferences it is possible to include the name of the school domain as well as my user name and password.
We have been unable to find any way of including the domain name into Location in Network or into Safari.
However, once Internet Explorer has negotiated with the server I can launch Safari and it works as normal.
Safari/Network seems to lack this option of including a domain name that my PC server requires.
Make sense to anyone?
Worth mentioning that my copy of Internet Explorer (5.2) often crashes, but usually it has done its job by then. I quite like the concept of Internet Explorer sacrificing itself to clear a path for Safari.

Proxy server keeps asking for authentication

My MacOS10.7.3 server coordinates a small subnet of 100 macs. To access the internet as provided by the larger organisation we must go through a proxy server. Unfortunately the proxy server keeps asking for authentication and checking the Remember This Password barely helps. Any tips would be appreciated.

Hi, the reply by ctzsnooze in the following thread was very helpful to me:
https://discussions.apple.com/message/23848959#23848959

OS X Snow Leopard server, proxy server stopped working.

Hi All,
I have OS X Snow Leopard Server (10.6.8) configured as a forward proxy server. It was working fine for a year until today. I cannot access any external web sites and get the following error:
Service Unavailable!
The server is temporary unable to service your request due to maintenance downtime or capacity problems. Please try again later.
If you think this is a server error, please contact the webmaster.
Error 503
www.apple.com
Sun Jul 27 22:53:18 2014
Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8y
If I change the proxy configuration on the Mac client (MacBook Air) to access the Internet directly (bypass the proxy server) all websites work fine. In the Server Admin, Web, logs I see the following errors:
Access /var/log/apache2/access_log.
"GET http://www.apple.com/startpage/HTTP/1.1" 503 1062
Error /var/log/apache2/error_log.
[error](60)Operation timed out: proxy:HTTP:attempt to connect to 2.16.236.183:80(*) failed.
I have tried the following but made no difference:
-Stop/Start the Web Server.
-Restarted the Server completely.
-Uninstalled/Reinstalled the Web Server (Off/On).
-Reconfigured the forward proxy settings.
-Empty the proxy cache folder.
-Checked the files exist under /etc/apache2 folder.
-Checked the files exist under /var/log/apache2 folder.
-Checked the the proxy_module and ssl_module are enabled.
Any ideas and how to troubleshoot this issue further is most appreciated.
Thanks in advance.

I think I have fixed it. I have reloaded/restarted the Cisco router/firewall back end and front end now proxy is working again. Very odd since I use the same devices to connect directly to the Internet without the proxy server. Oh well, it's working again so it's all good.

Redirecting http traffic to the proxy server

Hi,
We have a requirement to divert web traffic to blue coat proxy through firewall. Below is the setup
Requirement:
We need to divert web traffic from 10.20.200.0/23 [DMZ-STAFFNET] and point it to Bluecoat proxy to process the packets.
Now that ASA doesn't support PBR to accomplish this, how can we accomplish this ?

Hi,
To list one limitation that you might see in your scenario , You would only be able to redirect the subnets to the proxy from those subnets which are physically behind the interface where the WCCP server resides only. i.e. UNTRUST
Now , talking about the NAT , why don't you try this NAT if you don't want to NAT the Source part of the Traffic:-
(DMZ-STAFFNET) to (bluecoat) source static DMZ-STAFFNET DMZ-STAFFNET destination static internet proxy-server service original-http proxy-8080
Also , ASA now supports Policy Based routing from ASA 9.4.1 :)
Thanks and Regards,
Vibhor Amrodia

Windows xp update returned transfer aborted on iplanet proxy server 3.6

Have set proxy to bypass for windows updates.
However, once updates determined, they then fail to install, with the error "Tranfer aborted"

Hi,
If you are running iPlanet Web/Proxy server 3.6 under WindowsXP "OS" is not supported.
(OR)
Let me know whether your sceniro was has below.
That, when you tries to do a search(hit) on one of web sites(weblink like www.anytest.com).
You get the following error message:
"Transfer Aborted
Transfer was aborted for unknown reason. Retrying the request may work."
If it so please let me know whether proxy server is running on UNIX or WinNT platform.
Thanks,
Dakshin.
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support.

"do not use proxy server for local (intranet) addresses" IEM setting

Hi, i would like to find out where can i find the following setting in GPO which used be found in IEM.
"do not use proxy server for local (intranet) addresses" Enabled/Disabled
as currently im setting the IE proxy exception list via GPP, i don't see that option.

Hi,
As you notice that when we use GPP Internet Setting item to configure bypass proxy servers, there is no "do not use proxy server for local (intranet) addresses" option in GPP Internet
Setting item. However, as suggested by zanderol24’s reply, we can use bypass proxy server for local addresses option under
Proxy server to achieve the same function.
Best Regards,
Erin

Help needed for CORBA over Http through proxy server[Very Urgent]

Hi Friendz,
I am new to J2EE. Right now I am learning RMI, Corba now.
In RMI, to pass through Http to bypass firewall or through proxy sever, we can use either Http to port or Http to CGI/Servlet i.e., Http tunneling.
In the same, I am running a simple corba application, i want my corba application to pass through my proxy server using http which is configured to address 127.0.0.1 and port 8118.
How to pass my corba application through proxy server. please help me and it is very urgent.
Is it possible or not, please let me know some comments about this topic
Thanks in advance Friends for your help

This is so extremely urgent that it needs to be asked multiple times.
http://forum.java.sun.com/thread.jspa?threadID=762950

Outlook 2007 needs BT proxy server address to acce...

I have been through many sites and it transpires that using outlook 2007 to access an exchange server (2010) gives errors on syncing the offline address book where it just hangs on a send/receive.
MS know this is an issue and the only real workaround is to specify a Proxy server in the browser settings to allow access.
http://support.microsoft.com/kb/939765
The microsoft instructions are;
1.Start Internet Explorer, click Tools, and then click Internet Options.
2.On the Connections tab, click LAN settings.
3.Click to select the Bypass proxy server for local addresses check box, and then click Advanced.
4.Type the FQDN of the Exchange 2007 CAS server, and then click OK.
5.Restart Outlook.
All fine and good, but a proxy server address is required and I cannot find one for BT anywhere. Surely these must exist?
Any help appreciated as I do not want to have the expense of upgrading to outlook 2010 which 'may' work.
Thanks

You will need to delete the account and then re-create it as POP3, it is not possible to change from IMAP to POP3 on the fly. When you re-create the account, set it up using the manual option at the bottom of the screen rather than letting Outlook set itself up. In the Advanced tab, untick 'Leave a copy of messages on the server'.

Proxy server and uri rewrite

We're trying to set up some internet reports, which go through a proxy server (Novell iChain). We want to have the external calls use a particular cgicmd.dat entry on our ReportServer.
So
https://dnrx.wisconsin.gov/ldesrep?other_stuff
would turn into an internal app server call like
http://server/reports/rwservlet?cmdkey=ldesexternal&other_stuff
iChain won't do that. It can't work with the queryString portion of the call.
Apache will easily rewrite the incoming uri and queryString into the right form, but mod_rewrite seems to fire too late, so it interprets the /reports/rwservlet as a directory, not a program to be executed.
(I could probably call one Apache server and have it use mod_rewrite to send the rewritten call to another server, but that seems pretty kludgey).
Anyway, I'm looking for a good way to call a report through our proxy server and allow external access to only a limited set of reports on the server.
Any suggestions?
-- jim

Pintom1 wrote:
This works GREAT, however, I noticed when I'm at work and work has a proxy server for FTP I cannot connect to my domain and update - publish to my private server doesn't happen.
Would anyone know how to make ICal use a proxy? Having the proxy in the Network Prefs under FTP and the box checked does not work. Both passive and unpassive does not make a difference.
Is there a way to enter proxy information in the ftp:// string I am using?
I can get the calendars no problem. I know there is an HTTP proxy but ICal seems to be able to get through this fine?
Any suggestions would be appreciated.
THANKS!
Message was edited by: Pintom1
We had issues when we first published our calendars at work too. I am not certain that this will help, but you can try it. What we did was go to the Network Preference Pane and add the IP address of the Cal server to the list of IP's that bypass the proxy server. After that we had no issues viewing or updating our calendars. I don't know exactly how your network is setup, but it may be worth a shot.
Brian

Proxy Server - Bypass Skype Subnets

Similar Messages

Maybe you are looking for